Testing állások, munkák információbiztonság kategóriában

• Identify potential network, system, and application-level vulnerabilities.
• Develop and implement comprehensive mitigation strategies.
• Conduct security investigations and computer forensic analysis.
• Perform penetration testing and security-focused architecture reviews.

Review and evaluate project proposals and tender material in relation to information security requirements....

• Manage the onboarding of applications into Dynamic Application Security Testing (DAST) tools, ensuring thorough scanning and identifying vulnerabilities early in the SDLC
• Good understanding of SCA, SAST tools like SonarQube, DependencyTrack or similar

Lead and execute SOX 404 testing activities across global IT and business processes, with a focus on IT General Controls (e.g., access management, change management, system implementations), automated controls and third-party SOC reports....

• Implement security controls and tools for application security testing (SAST, DAST, IAST)
• Perform vulnerability assessments and penetration testing on applications
• Collaborate with developers to remediate security issues and enforce secure coding practices

You will align and drive application security across group IT–managed and internally developed applications, collaborating closely with interdisciplinary development teams to ensure a secure end‑to‑end lifecycle...

• Design, develop, and integrate components for establishing trust (e.g. via SPIFFE) and securing network connections (e.g. mTLS, IPSec, Wireguard) in dynamic environments
• Leverage existing Open Source software to implement state of the art security features

• Close collaboration with the Cloud Architect to design and implement cloud infrastructure solutions
• Building, evolving, and maintaining production grade Azure environments with a focus on automation, security, and reliability

• Define, maintain, and enhance governance controls for firewall management in line with internal policies, DORA, and BaFin requirements.
• Conduct second line reviews of firewall configurations, rule changes, and network segmentation to ensure compliance and risk reduction.

What You'll Do: We are seeking a skilled Cyber Detection Engineer to join our team and work on cutting-edge cloud and container security projects. This role offers the opportunity to develop and implement strategies to detect anomalous or malicious behavior in Public Cloud environments such as AWS,...

Design, develop, and maintain cloud infrastructure solutions for SaaS/PaaS products using Infrastructure as Code (IaC) principles Implement and optimize CI/CD pipelines to enable efficient software delivery Create and maintain APIs and automation scripts to streamline infrastructure management...

Strategy & Leadership: Take ownership of the ZEISS Cyber Security Strategy and Architecture, ensuring state-of-the-art cyber capabilities and priorities that align with the needs of ZEISS. Lead the definition and orchestration of the strategy lifecycle, closely integrating it with the global...

Develop and drive the implementation of Cloud Data Security strategy in alignment with the Product Manager, Tech Lead, and Engineering Manager....

• Define, maintain, and enhance governance controls for firewall management in line with internal policies, DORA, and BaFin requirements.
• Conduct second line reviews of firewall configurations, rule changes, and network segmentation to ensure compliance and risk reduction.

• Participate in risk analysis, threat modeling and security engineering sessions
• Contribute to the design, review, and testing of secure components
• Support the planning and coordination of penetration tests with the Testing team

Support the validation of security vulnerability reports...

Apply your knowledge of security architecture to help software engineers build secure products and services across a diverse technology stack, including microservices, mobile applications, and cutting-edge AI-driven solutions....

Own and operate EF’s ISO 27001-certified ISMS end-to-end Ensure ongoing compliance with ISO 27001 requirements and internal controls Plan and lead internal audits, coordinate external certification audits, and manage remediation activities Maintain risk registers, control frameworks, and treatment...

• Developing and refining IT resilience, backup and disaster recovery concepts on a group-wide level.
• Assessing existing backup, restore and recovery capabilities, including resilience against ransomware and large-scale failures.

Information Security Specialist IT HELLO! We are RONAL GROUP and our most important asset is our globally active team. With the right people by our side, our passion for what we do is what keeps the world moving. ARE WE RIGHT FOR YOU - AND ARE YOU RIGHT FOR US? Allow us to introduce ourselves:...